新品种

显示全部楼层 · 发表于 2008-5-8 22:15:28

回复真快，nnd

Please find a detailed report concerning each individual sample below:

?Filename Result
005.exe MALWARE

The file '005.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-5-8 22:25:27

谁说ESS的防火墙是垃圾的啊~~不就是拦截到了么?

显示全部楼层 · 发表于 2008-5-8 22:31:17

TO ArcaBit

显示全部楼层 · 发表于 2008-5-8 22:54:14

Hello,

005.exe_ - Trojan-Downloader.Win32.Agent.oiz,
PDSSvr.txt - Backdoor.Win32.Delf.ibd

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: 005.rar
> Attachment: PDSSvr.rar
[:1:]

显示全部楼层 · 发表于 2008-5-8 23:13:43

微点拦截

显示全部楼层 · 发表于 2008-5-8 23:22:47

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\005.EXE
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\005.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-5-10 07:02:10

The file 'PDSSvr.txt' has been determined to be 'MALWARE'. Our analysts named the threat BDS/Delf.ibd. The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection is added to our virus definition file (VDF) starting with version 7.00.04.21.

显示全部楼层 · 发表于 2008-5-10 12:49:14

江民报了

显示全部楼层 · 发表于 2008-5-10 21:00:17

McAfee MISS

[病毒样本] 新品种

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源